CVE-2024-41262

mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack...

The vulnerability of the software for managing and optimizing Cisco Intelligent Node (iNode) networks stems from the use of a hard-crypted cryptographic key. This allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of Cisco Intelligent Node iNode management and optimization software is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by...

CVE-2024-41255

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go...

PT-2024-29331 · Goframe · Goframe

Name of the Vulnerable Software and Affected Versions: goframe version 2.7.2 Description: The issue allows attackers to execute a man-in-the-middle attack due to the software being configured to skip TLS certificate verification via the gclient component. Recommendations: For goframe version 2.7....

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

CVE-2024-41254

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

CVE-2024-41256

CVE-2024-41256 concerns filestash v0.4, where default configurations in the ShareProofVerifier can skip TLS certificate verification when sending email verification codes. This creates a potential for a man-in-the-middle to access sensitive data through tampered or intercepted email communication...

CVE-2024-41255

Summary: Filestash v0.4 is configured to skip TLS certificate verification when using FTPS, potentially allowing a man‑in‑the‑middle attack via the Init function of index.go. Root cause: insecure TLS validation (InsecureSkipVerify style setting) leads to certificate trust bypass. Impact: high ris...

CVE-2024-41262

mmudb v1.9.3 is vulnerable due to using HTTP in the ShowMetricsRaw and ShowMetricsAsText functions, which could enable a man‑in‑the‑middle (MitM) interception of communications between client and server. The issue is documented across multiple sources (Red Hat, NVD, OSV, CVE listings) and is spec...

CVE-2024-41262

mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack...

CVE-2024-41256

Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-the-middle attack...

The vulnerability of the IBM Sterling B2B Integrator software, related to the disclosure of system data by unauthorized individuals, allows a hacker to execute a type of “man-in-the-middle” attack.

The vulnerability of the IBM Sterling B2B Integrator software for automating business processes involves the exposure of system data to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute a “man-in-the-middle” attack...

The vulnerability of SIPROTEC relay protection devices, related to insufficiently secure data encryption, allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of SIPROTEC relay protection devices is related to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out “man-in-the-middle” attacks using specially crafted packets sent to port 4443/tcp...

CVE-2024-41255

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go...

filestash 安全漏洞

filestash is a Dropbox-like file manager by the individual developer Mickael. A security vulnerability exists in filestash v0.4, which stems from a TLS certificate validation being skipped when using the FTPS protocol. An attacker can perform a man-in-the-middle attack via the Init function of...

CVE-2024-41253

The CVE-2024-41253 entry affects goframe v2.7.2, where the gclient component is configured to skip TLS certificate verification in the GHTTP client, enabling potential Man-in-the-Middle attacks. This is supported by Red Hat/Veracode/PT-2024-29331 entries and the NVD/NVD-derived descriptions. Impa...

PT-2024-29332 · Unknown · Litestream

Name of the Vulnerable Software and Affected Versions: litestream version 0.3.13 Description: An issue was discovered where the usage of the ssh.InsecureIgnoreHostKey function disables host key verification. This could possibly allow attackers to obtain sensitive information via a man-in-the-midd...

CVE-2024-41254

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

CVE-2024-41258

An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

CVE-2024-41258

An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...